1. About your privacy
2. What is personal data and processing of personal information?
For usto help you, we will need to collect and use personal data. Personal date means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3. Personal data held by us and the purpose of collecting the data
For usto be able to communicate with you and answer your questions and provide advice, we may need to collect basic personal data about you such as name, email address, telephone number, home address, your nationality and what language you speak. We may also collect information and documents regarding your request for help, such as government decisions.
4. Lawfulness of processing
Processing of personal data handled by us is based on your consent and in accordance with Article 9 of Act no. 90/2018 on Data Protection and the Processing of Personal Data (Data Protection Act).
5. For how long do we keep the personal data?
As we work on behalf of the Minister of Social Affairs, we are obliged to return all personal data to the National Archives of Iceland according to the Public Archives Act 2014 No 77. As a result, er are not permitted to delete documents and personal data received or created by us, without the permission of the National Archives of Iceland.
The obligation to return also means that all documents we receive and documents which are created by us must be returned to the National Archives of Iceland, where they will be stored for the future. Further information about the National Archives of Iceland can be found on its website: https://skjalasafn.is/.
6. From whom does Ráðgjafastofa collect personal data?
We collect personal data directly from you.
7. When does Ráðgjafastofa share personal date with third parties and why?
We use data processors who are third parties who provide us with services. In such cases, we conclude a data processing agreement with the party in question. Such an agreement stipulates, among other things, the party’s obligation to follow our instructions on the handling of personal data and it is not permitted to use it for other purposes. It is also obliged to ensure the security of the data in an appropriate manner.
We have access to MCC’s registration system, One Systems. This system allows us to initiate case and sort documents under applicable case. Each case has a specific lifespan, security, guarantor, unique number, case classification, case key and other information that is relevant to the processing of the case. This also gives us the opportunity to see how MCC has resolved similar issues that we are working on.
On our website you can contact us by using Svarbox, a messenger, which is sold and hosted by Internet á Íslandi ehf. (ISNIC). You can read ISNIC information policy here: https://isnic.is/en/about/informationpolicy
8. Transfer of personal date outside the European Economic Area
We are aware that strict conditions apply to the transfer of personal data to countries located outside the European Economic Area. We do not do so under any circumstances unless there is sufficient authorization to do so in accordance with the Data protection Act.
9. Your rights
Right of access: you have the right to ask for copies of your personal data we hold but there are some exemptions so you may not always receive all the data we process.
Right to rectification: you have the right to ask us to rectify information on you that you think is inaccurate or to complete information you think is incomplete.
Right to erasure: according to the Public Archives Act 2014 No 77 we are not permitted to delete documents and personal data received or created, without the permission of the National Archives of Iceland.
Right to restriction of processing: in certain circumstances you have the right to ask us to restrict the processing of your information.
You enjoy other rights, such as the right to data portability, right to object and rights in relation to automated decision making and profiling. It should be borne in mind that your rights are not always unreasonable and may be subject to various conditions.
If you want to exercise your rights you can contact us at email@example.com or our data protection officer at firstname.lastname@example.org
10. Security of personal data
We and our data processors have taken appropriate technical and organizational security measures to ensure the security of personal data in accordance with the Data Protection Act. This means, that only those employees who need the personal date for their work have access to the data. In addition, the organization promotes that employees receive regular appropriate education and training on safety issues.
11. Our communications information
Name: Ráðgjafastofa fyrir innflytjendur
Address: Laugavegur 116, 101 Reykjavík, Iceland
Email address: email@example.com
Phone number: (+354) 456-7555
12. Further information and Data protection officer
If you have further questions about your rights or how we handle personal data, you can always contact our data protection officer at firstname.lastname@example.org or 545 8800. You can also contact us by sending an e-mail to email@example.com.
13. Right to file complaint to the Data Protection Authority
If you doubt that we treat your personal data in accordance with the Data Protection Act, you have the right to file a complaint to the Data Protection Authority (www.personuvernd.is).